Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.mft
File: liqjLr7JzqHJPEvVX4XvfgpdT5I.mft (raw, json)
Hash identifier: ypQ1beZHkhjbvHzJVGMarPCwHsXa9x8HRsMsjHHMxgo=
Subject key identifier: FB:B2:E2:3F:6D:C3:35:11:06:42:FA:16:F9:7C:F6:0F:D5:48:57:9B
Authority key identifier: 96:2A:A3:2E:BE:C9:CE:A1:C9:3C:4B:D5:5F:85:EF:7E:0A:5D:4F:92
Certificate issuer: /CN=962aa32ebec9cea1c93c4bd55f85ef7e0a5d4f92
Certificate serial: 019D37C10016DEE0F3E21EE835A44C2DEC53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/liqjLr7JzqHJPEvVX4XvfgpdT5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.mft
Manifest number: 0C51
Signing time: Sun 29 Mar 2026 04:01:28 +0000
Manifest this update: Sun 29 Mar 2026 04:01:28 +0000
Manifest next update: Mon 30 Mar 2026 04:01:28 +0000
Files and hashes: 1: 1-3zUelmkTSgTStRjVWxjNNQBiM4.roa (hash: HmKxIUYZnOTiOcoe1j/2oHqq1Af7hqG1JDavmuwUScA=)
2: 2W_yiasSlHxMzGvCseIvYg5Ozd4.roa (hash: KtoflOTIZ2ZK45JBs/qFK0YOESeh/OnZjIbaMrPqgdU=)
3: liqjLr7JzqHJPEvVX4XvfgpdT5I.crl (hash: PqV+gVhoujDv7r6TXJLgB8jqWKgFTUjx3tOYONK2+UA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/liqjLr7JzqHJPEvVX4XvfgpdT5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c1:00:16:de:e0:f3:e2:1e:e8:35:a4:4c:2d:ec:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=962aa32ebec9cea1c93c4bd55f85ef7e0a5d4f92
Validity
Not Before: Mar 29 04:01:28 2026 GMT
Not After : Mar 30 04:01:28 2026 GMT
Subject: CN=fbb2e23f6dc335110642fa16f97cf60fd548579b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:dc:76:da:22:e2:3a:40:f8:2a:a6:a1:44:be:
36:c1:69:d2:95:ec:89:e2:7e:c4:80:a8:69:0f:8a:
12:97:74:ef:8d:d1:64:51:4a:f9:29:21:30:e8:9c:
4e:6d:e5:51:8d:d1:45:6b:a0:1d:0f:43:79:5d:95:
0f:40:92:62:55:b9:3a:c7:a1:03:ec:64:59:27:b9:
72:90:04:1a:b1:d2:84:45:6b:e8:72:9b:23:a4:c8:
93:85:c8:61:08:ba:0b:b5:07:a6:03:a0:2b:1d:c4:
76:e0:78:c8:94:1d:da:27:9d:0c:91:9a:39:1b:07:
82:11:67:92:95:92:69:c6:1f:84:ac:29:8a:fb:05:
99:62:87:80:ab:f0:97:53:bd:0b:7c:8e:5d:33:c3:
d1:43:3d:97:a5:40:53:0c:8a:00:5e:5e:52:fa:3e:
0b:8a:38:54:d0:eb:84:98:d9:8e:13:13:01:88:46:
b4:4e:2f:58:5f:97:d8:ca:bc:a6:2f:59:65:12:70:
40:bc:cf:3a:be:eb:b7:6f:08:72:30:ac:90:ca:92:
47:58:1f:e3:55:f6:5a:56:ac:3f:d5:8c:9b:11:71:
bf:72:33:ac:d9:04:80:30:45:f3:ea:e8:f2:32:ae:
74:37:9e:29:85:a7:4c:bf:86:fb:a9:c4:da:fc:a3:
b0:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:B2:E2:3F:6D:C3:35:11:06:42:FA:16:F9:7C:F6:0F:D5:48:57:9B
X509v3 Authority Key Identifier:
keyid:96:2A:A3:2E:BE:C9:CE:A1:C9:3C:4B:D5:5F:85:EF:7E:0A:5D:4F:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/liqjLr7JzqHJPEvVX4XvfgpdT5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:82:6f:07:a0:94:b0:4d:f0:2b:b5:67:5a:d0:cc:f1:af:ef:
9f:78:08:9f:b0:60:ce:51:30:3b:06:e8:f3:00:ae:f2:14:c3:
ab:cb:7b:ed:f4:5c:8b:64:96:10:c3:48:9a:86:e2:f0:18:82:
76:39:a2:26:db:38:b6:1e:c2:c3:24:f2:f1:f4:7b:2e:43:b4:
92:ec:6f:3b:ba:3a:f2:93:cb:80:e9:95:01:29:1f:2d:16:16:
09:34:d5:59:bb:60:82:8f:4f:4d:73:b2:2d:69:23:a8:dc:d8:
e5:98:60:80:6f:6c:67:10:a4:66:7b:9a:b4:0b:8a:be:77:85:
a4:10:47:15:16:00:33:2a:b5:7f:f5:6d:db:49:8c:7e:39:41:
d7:6a:af:b6:60:f9:22:22:df:3c:36:79:0d:1c:74:3b:43:3d:
40:48:32:51:94:c7:bd:bb:af:a1:61:ba:45:cb:80:e9:34:b4:
c4:9e:d9:99:d1:7e:f7:e0:be:3f:96:9c:93:74:45:fc:23:23:
ed:29:94:ad:4c:f9:7d:33:d5:58:d2:4b:e7:ae:d4:c2:dc:91:
52:59:63:21:b9:53:58:84:e4:7f:e9:c7:84:d3:56:71:e0:0f:
1b:bc:1c:ca:ab:93:ee:e8:b3:0d:e7:97:5c:b8:b0:66:a7:97:
04:97:41:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wQAW3uDz4h7oNaRMLexTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2MmFhMzJlYmVjOWNlYTFjOTNjNGJkNTVmODVlZjdlMGE1
ZDRmOTIwHhcNMjYwMzI5MDQwMTI4WhcNMjYwMzMwMDQwMTI4WjAzMTEwLwYDVQQD
EyhmYmIyZTIzZjZkYzMzNTExMDY0MmZhMTZmOTdjZjYwZmQ1NDg1NzliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttx22iLiOkD4KqahRL42wWnSleyJ
4n7EgKhpD4oSl3TvjdFkUUr5KSEw6JxObeVRjdFFa6AdD0N5XZUPQJJiVbk6x6ED
7GRZJ7lykAQasdKERWvocpsjpMiThchhCLoLtQemA6ArHcR24HjIlB3aJ50MkZo5
GweCEWeSlZJpxh+ErCmK+wWZYoeAq/CXU70LfI5dM8PRQz2XpUBTDIoAXl5S+j4L
ijhU0OuEmNmOExMBiEa0Ti9YX5fYyrymL1llEnBAvM86vuu3bwhyMKyQypJHWB/j
VfZaVqw/1YybEXG/cjOs2QSAMEXz6ujyMq50N54phadMv4b7qcTa/KOw6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPuy4j9twzURBkL6Fvl89g/VSFebMB8GA1UdIwQY
MBaAFJYqoy6+yc6hyTxL1V+F734KXU+SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGlxakxyN0p6cUhKUEV2Vlg0WHZmZ3BkVDVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS8yZTM4ZWEtYzlmYS00MDEzLTlmZDMt
ODU4YzZmODgyOWViLzEvbGlxakxyN0p6cUhKUEV2Vlg0WHZmZ3BkVDVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS8yZTM4ZWEtYzlmYS00MDEzLTlmZDMtODU4YzZmODgyOWVi
LzEvbGlxakxyN0p6cUhKUEV2Vlg0WHZmZ3BkVDVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOoJvB6CU
sE3wK7VnWtDM8a/vn3gIn7BgzlEwOwbo8wCu8hTDq8t77fRci2SWEMNImobi8BiC
djmiJts4th7CwyTy8fR7LkO0kuxvO7o68pPLgOmVASkfLRYWCTTVWbtggo9PTXOy
LWkjqNzY5ZhggG9sZxCkZnuatAuKvneFpBBHFRYAMyq1f/Vt20mMfjlB12qvtmD5
IiLfPDZ5DRx0O0M9QEgyUZTHvbuvoWG6RcuA6TS0xJ7ZmdF+9+C+P5ack3RF/CMj
7SmUrUz5fTPVWNJL567UwtyRUlljIblTWITkf+nHhNNWceAPG7wcyquT7uizDeeX
XLiwZqeXBJdBsA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:42 2026 by rpki-client